Privacy Policy

VBX Privacy Policy

Last updated: April 23rd, 2026

Bittreo Technologies Ltd., operating as VBX (“VBX”, “we”, “our”, or “us”), is committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and British Columbia’s Personal Information Protection Act (PIPA).

This Privacy Policy describes how we collect, use, store, disclose, and protect personal information when you use our services.

1. Information We Collect

We collect the following categories of personal information:

a. Account Information

• Name, email address, and phone number
• Residential address
• Government-issued identification
• Date of birth
• Proof of address documents

b. Financial Information

• Banking and payment information used to fund transactions or receive withdrawals
• Information about the source of funds, where required
• Transaction and account activity records
• Payment contact details, such as an e-transfer email address or Interac handle

c. Technical Information

• IP address
• Browser type, device identifier, and operating system
• Usage logs and session data
• Cookies and analytics identifiers

d. Compliance Data

• Identity verification outcomes
• Compliance screening results
• Digital asset transaction and wallet review information
• Other information required to meet applicable legal and regulatory obligations

2. How We Use Your Information

We use personal information to:

• Provide access to our services
• Verify identity and meet legal and regulatory requirements
• Maintain the security and integrity of our services, including detecting and preventing fraud and misuse
• Communicate with users regarding account activity, compliance requirements, and service-related notices
• Process transactions and support settlement
• Comply with applicable legal and regulatory requirements
• Send marketing communications, including product announcements, promotions, newsletters, and service updates (with consent)
• Request customer feedback or reviews through third-party review platforms

You may withdraw consent for marketing communications at any time. Withdrawal of marketing consent does not affect essential service or compliance-related communications.

3. Who We Share Information With

We may share personal information with the following categories of third parties, strictly as required to operate our services:

• Identity verification service providers
• Compliance support service providers
• Banking, payment, and financial partners involved in funding or withdrawals
• Trading and settlement service providers
• Cloud hosting and infrastructure providers, including providers located in the United States
• Analytics, advertising, and marketing technology providers
• Service providers that help us collect customer feedback

We may disclose personal information to regulators, government authorities, or law enforcement where required or permitted by applicable law, including in connection with legal, regulatory, or compliance obligations.

We do not disclose information to regulators or law enforcement unless legally obligated to do so, and such disclosures are limited to what the law requires.

We do not sell or rent personal information.

4. Data Retention

We retain personal information only as long as necessary to:

• Provide our services
• Comply with legal and regulatory obligations, including mandatory recordkeeping requirements under applicable Canadian laws, which may require us to retain certain information for several years after account closure
• Respond to audits, investigations, or legal claims

Requests for deletion of personal information are subject to these legal retention requirements. Once information is no longer required, it is securely deleted or anonymized.

5. Data Storage & Security

Personal information is stored on secure, encrypted servers located in Canada and the United States. Information processed or stored outside Canada may be subject to the laws of those jurisdictions.

We use reasonable administrative, technical, and physical safeguards, including:

• Encryption in transit and at rest
• Access controls and logging
• Periodic security reviews
• Secure data handling procedures

No system is completely secure. You are responsible for protecting your login credentials and devices.

6. Cookies & Analytics

We use cookies and similar technologies to:

• Maintain session security
• Analyze website traffic and usage
• Improve platform functionality and user experience

We use Google Analytics, which processes anonymized usage data and may store or process information outside Canada. We and our service providers may use cookies and similar technologies to understand site usage, improve functionality, and support communications and outreach efforts.

You can control cookies through your browser settings or use Google’s analytics opt-out tools. Disabling cookies may limit certain features of the site.

7. Your Rights

Subject to applicable law, you may request:

• Access to personal information we hold
• Correction of inaccurate or incomplete information
• Withdrawal of consent for marketing communications
• Deletion of personal information, where legally permitted

Requests should be submitted in writing using the contact information below. Withdrawal of marketing consent does not affect service-related or compliance communications required by law.

8. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The most current version will always be available at https://VBX.ca/privacy. Continued use of our services constitutes acceptance of the updated policy.

9. Contact Us

Bittreo Technologies Ltd.
Operating as VBX
Email: support@VBX.ca
Attn: Privacy Officer
Mailing Address: 202-1807 Burrard St., Vancouver, BC, V6J 3G9